Introduce toHTMLObjectElement.

It will detect bad casts in assertion-enabled builds.

BUG=

Review URL: https://chromiumcodereview.appspot.com/22989004

git-svn-id: svn://svn.chromium.org/blink/trunk@156085 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Revert 156076 "innerHTML (innerText and textContent) should lazy..."

Because the patch breaks content_browsertests (OnHandleKeyboardEvent).

> innerHTML (innerText and textContent) should lazyAttach
> 
> Just like doing appendChild() to add children, innerHTML should use
> lazyAttach.
> 
> This leaves editing and the parser as the last users of synchronous
> attach.
> 
> BUG=230268
> 
> Review URL: https://chromiumcodereview.appspot.com/22917003

TBR=esprehn@chromium.org

Review URL: https://codereview.chromium.org/22835008

git-svn-id: svn://svn.chromium.org/blink/trunk@156086 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Setting date from calendar picker shouldn't reset hour field of datetime-local

Opening the calendar picker will reset the hour field of a datetime-local input if the
hour is 12 and the date/time format uses 0-23 hour or 0-24 hour field.

DateTimeFieldsState::hour() should be 1-12 hour.
setValueAsInteger should take either the original value or 0-23 hour.

BUG=271451

Review URL: https://chromiumcodereview.appspot.com/23173003

git-svn-id: svn://svn.chromium.org/blink/trunk@156087 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Remove innerSpinButtonElement() and speechButtonElement() from HTMLInputElement.

Use ShadowRoot::getElementById instead.

BUG=

Review URL: https://chromiumcodereview.appspot.com/22879005

git-svn-id: svn://svn.chromium.org/blink/trunk@156088 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Enhance the checks on texture level for the binding texture against m_maxTextureLevel and m_maxCubeMapTextureLevel.
It can avoid out of bound access and possible crash.

BUG=268591

Review URL: https://chromiumcodereview.appspot.com/22392002

git-svn-id: svn://svn.chromium.org/blink/trunk@156089 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Page::contextMenuController() and pointerLockController() should return references.

They can't be null. They had better provide references so that users
don't need to worry about null pointer deferences.

BUG=

Review URL: https://chromiumcodereview.appspot.com/22821004

git-svn-id: svn://svn.chromium.org/blink/trunk@156090 bbb929c8-8fbe-4397-9dbb-9b2b20218538